When working with evidence drives, data integrity is critical. Using ECC RAM, which identifies and corrects common single-bit errors, would help dramatically improve data transfer reliability in digital forensic tools. Why use ECC memory Electrical, magnetic or even radioactive interference inside a system, may cause a single bit of DRAM Read more…
How often are you faced with a case with multiple individual devices with different interfaces (HDDs, SSDs, NVMe, USB, etc.) or a whole RAID array? If all you have on your hands is one imager with no parallel imaging capacity, it can result in a prohibitive processing timeline. To help Read more…
Host protected area (HPA) and device configuration overlay (DCO) are special hidden areas. They were developed as a feature by hard drive manufacturers for secure storage of vendor utilities or to make a drive appear to have smaller capacity than the drive actually has. But for a while now, proficient users Read more…
Welcome to the December release of Atola TaskForce! In this firmware version you will enjoy: NVMe support: imaging of NVMe drives using M.2 extension module Imaging of all sectors with data: skip empty sectors and image data only, one partition at a time Improved interface: clickable and editable elements are now easily Read more…
TaskForce automatically creates reports for every single action applied to each drive connected to it. The system also allows browsing through all cases and reports, without corresponding devices being connected to the unit. The reports are listed and can be easily retrieved in different parts of TaskForce software. 1. Via Read more…
Atola TaskForce’s imaging functionality provides many adjustable settings to help forensic examiners follow the guidelines set by their organizations as well as common-sense evidence handling routines. When you need to create two images of a source drive and verify that both images are identical to the source drive, you will need to Read more…
As we travel to exhibit at forensic events worldwide, we usually bring some of the fastest SSDs (usually Samsung 850 Pro) with us to show the speed at which they can be imaged with Atola Insight Forensic (on these drives, it constitutes around 500 MB/s). At the same time, we Read more…
A situation may occur when multi-target imaging is paused to be continued later, but one or more targets become unavailable. The drive may need to be taken and used by another technician or broken, or the server with the image file may become unavailable. But you may need to finish Read more…
Insight’s case management system has been created to help users efficiently keep track of hard drive-related information. Even if a hard drive has already been used for a while, imaging and hashing have already been performed, it is still possible to open the case and make adjustments to its details. Read more…